Spyware, viruses, & security forum: VULNERABILITIES / FIXES - March 19, 2012

Release Date : 2012-03-19

Criticality level : Highly critical
Impact : System access
Where : From remote
Solution Status : Vendor Workaround

Software: VLC media player 1.x

Description:
Multiple vulnerabilities have been reported in VLC Media Player, which can be exploited by malicious people to compromise a user's system.

Solution
Fixed in the GIT repository.:

Original Advisory:
VLC Media Player (VideoLAN-SA-1201, VideoLAN-SA-1202):
http://www.videolan.org/security/sa1201.html
http://www.videolan.org/security/sa1202.html

http://secunia.com/advisories/48503/

Release Date : 2012-03-19

Criticality level : Not critical
Impact : Manipulation of data
Where : Local system
Solution Status : Unpatched

Software: systemd

Description:
A weakness has been reported in systemd, which can be exploited by malicious, local users to manipulate certain data.

The weakness is caused due to a race condition in the systemd-logind component when removing certain records during user's logout and can be exploited to delete an arbitrary file via a symlink.

The weakness is reported in version 44 and prior.

Solution:
Fixed in the GIT repository.

Provided and/or discovered by:
Reported by Michal Schmidt, Red Hat

Original Advisory:
http://seclists.org/oss-sec/2012/q1/672

http://secunia.com/advisories/48331/

Release Date : 2012-03-19

Criticality level : Less critical
Impact : Cross Site Scripting
Where : From remote
Solution Status : Unpatched

Software: FlexCMS 3.x

Description:
Ivano Binetti has discovered a vulnerability in FlexCMS, which can be exploited by malicious people to conduct cross-site request forgery attacks.

The application allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to e.g. change an administrator's password by tricking a logged in administrator into visiting a malicious web site.

The vulnerability is confirmed in version 3.2.1. Other versions may also be affected.

Solution:
Do not browse untrusted websites or follow untrusted links while logged in to the application.

Provided and/or discovered by:
Ivano Binetti.

Original Advisory:
http://ivanobinetti.blogspot.com/2012/03/flexcms-multiple-csrf-vulnerabilities.html

http://secunia.com/advisories/48451/

MaraDNS Deleted Domain Record Cache Persistence Vulnerability

Release Date : 2012-03-19

Criticality level : Less critical
Impact : Spoofing
Where : From remote
Solution Status : Vendor Patch

Software: MaraDNS 1.3.x
MaraDNS 1.4.x

Description:
A vulnerability has been reported in MaraDNS, which can be exploited by malicious people to conduct spoofing attacks.

The vulnerability is caused due to an error within the cache update policy, which does not properly handle revoked domain names. This can be exploited to keep a domain name resolvable after being deleted from registration.

The vulnerability is reported in versions prior to 1.3.07.15 and 1.4.12.

Solution:
Update to version 1.3.07.15 and 1.4.12 or upgrade to version 2.x.

Provided and/or discovered by:
Reported by the vendor.

Original Advisory:
http://www.maradns.org/changelog.html

http://secunia.com/advisories/48492/

IBM HTTP Server "httpOnly" Cookie Disclosure and Scoreboard Security Bypass

Release Date : 2012-03-19

Criticality level : Less critical
Impact : Security Bypass
Exposure of sensitive information
Where : From remote
Solution Status : Vendor Patch

Software: IBM HTTP Server 7.0.x
IBM HTTP Server 8.0.x

Description:
IBM has acknowledged a weakness and a vulnerability in IBM HTTP Server, which can be exploited by malicious people to disclose potentially sensitive information and bypass certain security restrictions.

The weakness and the vulnerability are reported in versions 7.0 and 8.0.

Solution:
Apply APAR PM55760 and PM56128. A fix is scheduled for versions 7.0.0.23 and 8.0.0.3.

Original Advisory:
IBM (PM55760, PM56128):
http://www.ibm.com/support/docview.wss?uid=swg1PM55760
http://www.ibm.com/support/docview.wss?uid=swg1PM56128

http://secunia.com/advisories/48386/